Stripe Webhook Handler

# stripe-webhook.swarm.toml — a declarative SWARM CONFIG (a GridSnapshot the
# engine boots from via KANE_SNAPSHOT). Infrastructure-as-code for the Stripe
# inbound-webhook control-plane part: it stands up three nodes and wires them.
#
#   [Webhook Trigger] ──hook→verify (Comms payload)──▶ [Script: stripe-verify]
#                                                              ▲
#                                     vault→verify (DataAccess) │  secret as env
#                                                        [Vault]
#
# Node KIND comes from `template_id` (builtin-webhook / -script / -vault).
# Wire KIND is DERIVED from the endpoint kinds at load: vault→script = DataAccess
# (the secret grant), hook→script = Comms (the payload feed).
#
# NOT in this file (provisioned out-of-band, by design): the script's wasm
# module (kane-cli SetScriptModule), the webhook path (UpdateTrigger), and the
# Vault secret (kane-cli secret set). Grid layout is declarative; bytes + secrets
# are not.

[[agents]]
id = "hook"
name = "STRIPE HOOK"
gx = 2
gy = 3
width = 2
height = 2
template_id = "builtin-webhook"

[[agents]]
id = "verify"
name = "STRIPE VERIFY"
gx = 6
gy = 3
width = 2
height = 2
template_id = "builtin-script"

[[agents]]
id = "vault"
name = "STRIPE VAULT"
gx = 6
gy = 6
width = 2
height = 2
template_id = "builtin-vault"

[[wires]]
from = "hook"
to = "verify"

[[wires]]
from = "vault"
to = "verify"